Critical Alert
Security alert: 47.254.192.213 rated 10/10 based on 16 verified incidents.
Threat profile indicates sustained malicious activity with 68% confidence rating.
More threatening than 99% of monitored IPs
IP Address
47.254.192.213
IPv4
Public
MY
Threat Intelligence Analysis
Automated assessment based on aggregated, anonymized threat data
Top 5% Most Dangerous
Malaysia
Location
Alibaba US Technology Co....
ASN 45102
16
Reports
Honeypot
Data Source
Threat Categories
Exploited Host
13
Hacking
3
Technical Details
This IP belongs to a compromised system being used as an attack platform without the owner's knowledge.
Recommended Mitigations
Block the IP and consider notifying the hosting provider or system owner about the compromise.
Behavioral Analysis
Activity Pattern:
Consistent Activity
Steady malicious activity over less than a day indicates persistent threat actor operations.
First Observed
6. October 2026
Last Activity
6. October 2026
Recent (7 days)
1 incidents
Reputable Network
This IP is hosted on a network (ASN 45102) with generally good reputation. The ISP Alibaba US Technology Co., Ltd. maintains standard security practices.
The malicious activity may represent an isolated compromised system rather than systematic abuse.
Security Recommendations
Implement immediate countermeasures. Well-resourced threat actor identified.
Long-term blocking recommended.
Reputation Summary
Threat Level
10/10
Critical
Critical
Activity Frequency
0/10
Inactive
Confidence Score
68%
High Confidence
Confidence History
1. May 2026 - 6. Oct 2026
68%
Current
Stable
Trend
Security Reports (16)
| Date | Categories | Source | Confidence |
|---|---|---|---|
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% | |
| Hacking | Honeypot | 75% | |
| Exploited Host | Honeypot | 75% |
Technical Details
Basic Information
- IP Address
- 47.254.192.213
- IP Version
- IPv4
- Network Type
- Public
- Tor Network
- No
- Network Class
- Class A
Geolocation
- Country
-
MY
- ASN
- AS45102
- ISP
- Alibaba US Technology Co., Ltd.
DNS Information
- Reverse DNS
- None
- PTR Record
- No
- Connection Type
- Static
Statistics
- Total Reports
- 16
- First Reported
- 11 May 2026
- Last Reported
- 6 Oct 2026, 08:28
Network Reputation
Analysis of the entire network (ASN) that this IP address belongs to, providing context about the hosting provider and network-wide threat patterns.
Network Identity
AS45102
Alibaba US Technology Co., Ltd.
DE
Network Threat Assessment
1/10
This network appears to be relatively clean with very low threat indicators.
Network Statistics
4,988
Total IPs Monitored
28,788
Total Reports
5.8
Reports per IP
Network Context
This IP address belongs to Alibaba US Technology Co., Ltd. (AS45102), which manages 4,988 IP addresses in our monitoring system. Out of these, 28,788 have been reported for suspicious activities, resulting in a network-wide threat level of 1/10.
Network status:
This network appears to be well-maintained with low threat indicators.
Comparative Analysis
How this IP compares to others in our threat intelligence database
99
%
Global Threat Ranking
This IP is more threatening than 99% of all IPs in our database.
Top 10% Most DangerousGlobal Comparison
Compared against 834,675 reported IPs worldwide
Threat Level
10/10
avg: 6.3
++
Total Reports
16
avg: 9
++
Network Comparison
Compared against 7,651 IPs in ASN 45102
Threat Level
10/10
network avg: 8.3
+
Total Reports
16
network avg: 9
++
Network Alibaba US Technology Co., Ltd. has overall threat level 1/10
Geographic Comparison
Compared against 3,876 IPs in MY
Threat Level
10/10
country avg: 6.9
+
Total Reports
16
country avg: 6
++
Activity Trends
Daily report activity over the last 30 days showing patterns and peaks.
Peak Day
6 Oct 2026
1 reports
Daily Average
0
reports/day
Most Active
Friday
4 reports
Evolution of threat level over time based on reported categories and frequency.
Initial Threat
6/10
Current Threat
6/10
Distribution of threat categories reported over time.
Top Threat Categories
Exploited Host
13
Hacking
3
Activity patterns showing when this IP is most active during the day and week.
Hourly Activity
Peak activity at 18:00 with 4 reports
Weekly Activity
Geographic Threat Distribution
758,637 threat incidents tracked globally • Last 24h: 31,433 Logs
FEED
Top Threat Sources
-
01
United States148,498 19.6% -
02
Brazil111,916 14.8%
-
03
India87,524 11.5%
-
04
China46,145 6.1%
-
05
SC29,254 3.9%
-
06
Germany18,475 2.4%
-
07
Netherlands18,046 2.4%
-
08
Pakistan17,863 2.4%
-
09
Argentina16,274 2.1%
-
10
Colombia15,173 2%
+40 more countries
THREAT LEVEL
LOW
MED
HIGH
Related IPs
Other IPs associated with this address through network or behavioral similarity
IPs from the same Autonomous System (AS) network provider.
20
Related IPs
9.8/10
Avg Threat
88%
Avg Confidence
20
High Threat
High-risk network: Majority of related IPs are flagged
47.81.209.84
8/10
Confidence
96%
Reports
38
Location
MY
MY
8.220.195.43
10/10
Confidence
94%
Reports
36
Location
KR
KR
8.222.211.75
10/10
Confidence
94%
Reports
26
Location
SG
SG
8.210.41.4
10/10
Confidence
94%
Reports
21
Location
HK
HK
8.210.207.114
10/10
Confidence
92%
Reports
13
Location
HK
HK
47.251.42.6
10/10
Confidence
89%
Reports
32
Location
US
US
47.77.222.167
10/10
Confidence
89%
Reports
14
Location
US
US
43.99.22.182
10/10
Confidence
89%
Reports
13
Location
HK
HK
47.251.187.196
10/10
Confidence
87%
Reports
16
Location
US
US
8.209.106.188
8/10
Confidence
87%
Reports
16
Location
DE
DE
47.251.70.145
10/10
Confidence
87%
Reports
16
Location
US
US
8.216.3.51
10/10
Confidence
86%
Reports
16
Location
JP
JP
8.209.226.195
10/10
Confidence
86%
Reports
16
Location
JP
JP
47.89.255.48
10/10
Confidence
85%
Reports
14
Location
US
US
8.216.5.244
10/10
Confidence
84%
Reports
24
Location
JP
JP
8.216.16.62
10/10
Confidence
84%
Reports
19
Location
JP
JP
8.209.110.240
10/10
Confidence
84%
Reports
15
Location
DE
DE
47.77.230.166
10/10
Confidence
84%
Reports
14
Location
US
US
47.250.221.153
10/10
Confidence
84%
Reports
9
Location
MY
MY
47.250.178.53
10/10
Confidence
83%
Reports
20
Location
MY
MY
IPs from the same subnet range, likely same network segment.
7
Related IPs
8.4/10
Avg Threat
24%
Avg Confidence
7
High Threat
High-risk network: Majority of related IPs are flagged
47.254.192.137
10/10
Confidence
74%
Reports
20
Location
MY
MY
47.254.192.136
8/10
Confidence
62%
Reports
32
Location
MY
MY
47.254.192.78
7/10
Confidence
30%
Reports
2
Location
MY
MY
47.254.192.95
7/10
Confidence
3%
Reports
1
Location
MY
MY
47.254.192.107
10/10
Confidence
1%
Reports
4
Location
MY
MY
47.254.192.163
10/10
Confidence
0%
Reports
4
Location
MY
MY
47.254.192.118
7/10
Confidence
0%
Reports
1
Location
MY
MY
IPs from the same country with similar threat profiles.
15
Related IPs
9.3/10
Avg Threat
96%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
219.92.37.221
10/10
Confidence
100%
Reports
202
ISP
TM TECHNOLOGY S...
175.136.213.159
10/10
Confidence
100%
Reports
16
ISP
TM TECHNOLOGY S...
202.165.14.135
10/10
Confidence
100%
Reports
14
ISP
TM TECHNOLOGY S...
118.101.47.214
8/10
Confidence
99%
Reports
13
ISP
TM TECHNOLOGY S...
202.165.14.147
10/10
Confidence
98%
Reports
14
ISP
TM TECHNOLOGY S...
2001:f40:93f:1cbc:e6d3:1a1c:3f32:a081
8/10
Confidence
97%
Reports
16
ISP
TIME dotCom Ber...
202.165.26.42
10/10
Confidence
97%
Reports
13
ISP
TM TECHNOLOGY S...
47.81.209.84
8/10
Confidence
96%
Reports
38
ISP
Alibaba (US) Te...
175.139.151.249
10/10
Confidence
96%
Reports
32
ISP
TM TECHNOLOGY S...
202.165.22.102
8/10
Confidence
95%
Reports
12
ISP
TM TECHNOLOGY S...
101.99.91.139
10/10
Confidence
94%
Reports
201
ISP
Shinjiru Techno...
113.211.192.150
10/10
Confidence
94%
Reports
46
ISP
Binariang Berhad
103.144.139.153
10/10
Confidence
94%
Reports
43
ISP
Gigabit Hosting...
123.253.33.161
10/10
Confidence
94%
Reports
24
ISP
Gigabit Hosting...
103.91.64.38
8/10
Confidence
93%
Reports
1,032
ISP
Gigabit Hosting...
IPs with similar threat level and confidence scores.
15
Related IPs
9.3/10
Avg Threat
68%
Avg Confidence
15
High Threat
High-risk network: Majority of related IPs are flagged
20.162.109.159
8/10
Confidence
68%
Reports
32
Location
GB
GB
35.195.42.59
10/10
Confidence
68%
Reports
8
Location
BE
BE
216.180.246.228
8/10
Confidence
68%
Reports
10
Location
US
US
104.234.53.130
8/10
Confidence
68%
Reports
20
Location
US
US
47.250.160.149
10/10
Confidence
68%
Reports
13
Location
MY
MY
37.10.113.221
10/10
Confidence
68%
Reports
65
Location
GB
GB
64.62.197.91
10/10
Confidence
68%
Reports
18
Location
US
US
47.245.141.207
10/10
Confidence
68%
Reports
17
Location
DE
DE
47.88.7.35
10/10
Confidence
68%
Reports
13
Location
US
US
43.135.139.165
10/10
Confidence
68%
Reports
47
Location
US
US
45.8.19.228
10/10
Confidence
68%
Reports
23
Location
US
US
8.216.8.28
10/10
Confidence
68%
Reports
21
Location
JP
JP
152.32.197.121
8/10
Confidence
68%
Reports
88
Location
BR
BR
173.239.211.141
8/10
Confidence
68%
Reports
12
Location
US
US
92.51.101.162
10/10
Confidence
68%
Reports
93
Location
GE
GE